5.2.2.3. 验证 ID 映射

dcdiag /v /test:ridmanager /s:ad.example.com

C:\> dcdiag /v /test:ridmanager /s:ad.example.com
...
Available RID Pool for the Domain is 1600 to 1073741823
...

ipa idrange-find

[root@ipaserver ~]# ipa idrange-find
----------------
1 range matched
----------------
  Range name: AD.EXAMPLE.COM_id_range
  First Posix ID of the range: 610600000
  Number of IDs in the range: 200000
  First RID of the corresponding RID range: 0
  Domain SID of the trusted domain: S-1-5-21-796215754-1239681026-23416912
  Range type: Active Directory domain range
----------------------------
Number of entries returned 1
----------------------------

wmic useraccount where name="administrator" get sid

C:\> wmic useraccount where name="administrator" get sid
S-1-5-21-796215754-1239681026-23416912-500

id ad\\administrator

[root@ipaserver ~]# id ad\\administrator
uid=610600500(administrator@ad.example.com)...